Am 29.01.2013 17:20, schrieb John Reiser: >>>> A generic fallback image should be >>>> installed by anaconda on installation/update and never ever be >>>> removed. > >> Also, fallback has interesting security properties… > > > "Rescue mode" forces a SELinux relabel at the next boot, and relabel > can take a very long time. > > How does "fallback mode" handle this, particularly if there have been > updates to SELinux policy after the fallback was created? >
The "rescue" initramfs and all initramfs in general do _not_ carry any selinux policies. These are turned on later on the real root. Nothing changes here. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel
